284211 matches found
EUVD-2026-81509
Shop manager SQL Injection in WP-Lister Lite for eBay = 3.8.11 versions...
CVE-2026-66628
A SQL Injection vulnerability was identified in the shop manager functionality of the WordPress plugin WP-Lister Lite for eBay , affecting versions
CVE-2026-66625 WordPress WC Vendors Marketplace plugin <= 2.7.2.1 - SQL Injection vulnerability
Administrator SQL Injection in WC Vendors Marketplace = 2.7.2.1 versions...
CVE-2026-66625 WordPress WC Vendors Marketplace plugin <= 2.7.2.1 - SQL Injection vulnerability
Administrator SQL Injection in WC Vendors Marketplace = 2.7.2.1 versions...
CVE-2026-66626 WordPress SKT Addons for Elementor plugin <= 4.0 - SQL Injection vulnerability
Editor SQL Injection in SKT Addons for Elementor = 4.0 versions...
CVE-2026-66626 WordPress SKT Addons for Elementor plugin <= 4.0 - SQL Injection vulnerability
Editor SQL Injection in SKT Addons for Elementor = 4.0 versions...
CVE-2026-66625
WC Vendors Marketplace , a WordPress plugin, is vulnerable to an administrator-level SQL injection in versions
EUVD-2026-81507
Administrator SQL Injection in WC Vendors Marketplace = 2.7.2.1 versions...
CVE-2026-66626
CVE-2026-66626 is an Editor SQL Injection vulnerability in the WordPress plugin SKT Addons for Elementor (versions ≤ 4.0 ), discovered by Ananda Dhakal via Patchstack. The flaw allows an authenticated user with high privileges to inject SQL through the editor functionality. The CVSS 3.1 score is ...
EUVD-2026-81508
Editor SQL Injection in SKT Addons for Elementor = 4.0 versions...
CVE-2026-66619 WordPress Newsletters plugin <= 4.18 - SQL Injection vulnerability
Administrator SQL Injection in Newsletters = 4.18 versions...
CVE-2026-66624 WordPress WPMasterToolKit plugin <= 2.22.0 - SQL Injection vulnerability
Administrator SQL Injection in WPMasterToolKit = 2.22.0 versions...
CVE-2026-66624 WordPress WPMasterToolKit plugin <= 2.22.0 - SQL Injection vulnerability
Administrator SQL Injection in WPMasterToolKit = 2.22.0 versions...
EUVD-2026-81505
Administrator SQL Injection in Newsletters = 4.18 versions...
CVE-2026-66619 WordPress Newsletters plugin <= 4.18 - SQL Injection vulnerability
Administrator SQL Injection in Newsletters = 4.18 versions...
CVE-2026-66619
CVE-2026-66619 is an Administrator SQL Injection vulnerability in the WordPress Newsletters plugin , affecting versions 4.18 and below . The vulnerability was discovered by Ananda Dhakal via Patchstack. The CVSS 3.1 base score is 7.6 (HIGH) with a vector of AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L, in...
CVE-2026-66624
WPMasterToolKit , a WordPress plugin, is affected by an Administrator-level SQL Injection in versions ≤ 2.22.0 , discovered by Ananda Dhakal (Patchstack). The vulnerability carries a CVSS 3.1 score of 7.6 (HIGH) with a vector of AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L, indicating that a privileged (a...
EUVD-2026-81506
Administrator SQL Injection in WPMasterToolKit = 2.22.0 versions...